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ABSTRACT 

This paper deals with the "Calculus of Knowledge", an extension 
of the propositional calculus in which one may reason about what other 
people know. Semantic and Syntactic systems are developed, certain 
theorems are proven, and a formal solution in the system of a well- 
known reasoning problem is presented. 
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I. INTRODUCTION 



This paper deals with a calculus which enables one to formalize 
reasonings about what people know, as proposed by Dr. John McCarthy 
in his IH Memo, A Calculus of the Knowledge of Propositions ". V.'e 
treat the Calculus of Knowledge as an extension of the proposltional 
calculus ( which permits propositions of a certain form to be inter- 
preted, person S knows that proposition A is true". Following 
McCarthy, the precise formulation of this new system is restricted 
by requiring that the system have the following basic properties 
(motivated by our Intuitive notion of the nature of such reasoning 
modified by an attempt to keep this first version of a new locic ' 
reasonably simple): 

1. V.'hat anyone knows is true; 

2. For any proposition one knows whether one know3 it; 

3. One knows any logical consequences of the other things one 
knows. By logical consequences" we mean all propositions deducible 
xn the Calculus of Knowledge, since this Calculus is an attempt to 
formalize just such reasoning. In other words, the set of proposi- 
tions which any pereson knows is logically closed in the system, 
xherefore any person knows all tautologies in the system (which must 
include all propositional-calculus tautologies). 

McCarthy proposed a model and an axiom schema for this calculus 
and he suggested certain problems and properties of his system which 
should be studied. However, the present author has shown the model 
to be inconsistent and would prefer to work with a somewhat different 
form of syntactic system. Therefore this paper deals with the fol- 
lowing new work (based on McCarthy's basic formulations and notation); 

1. The construction of a more direct (and, hopefully, correct) 
model will be described. 

2. Viewing the Calculus of Knowledge as an extention of the 
Proposltional Calculus, we have carried over conceots of implication 
and rules of deduction from a system of mathematical logic studied 
under Dr. Hartley Rogers, Jr. Some important theorems of the result- 
ing system will be proven. 

3. As an example of the use of the decision procedure, a formal 
solution to the three wise men problem" will be presented. 
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II* FORMULAS: 



The basic symbols to be used in formulas of the Calculus of 
Knowledge are the connectives 






, A, V, =», <^ 



and the variables 



p, q, r, ... (standing for propositions) 
S, S 1 , S", ... (standing for persons). 



Formulas are defined, in the calculus, as follows: 

If *=< is a propositional variable, then <=< is a formula 
If or is a formula, then ~ <v is a formula 



If or , (3 are formulas, then r 

If c^ , p are formulas, then 

If ex , p are formulas, then 

If o^ , p are formulas, then 



r °<V$] is a formula 
<*"=»£] is a formula 
[^«^p] is a formula 
If o< is a formula and S is a people -variable, then [S*^] is a formula, 

(Motivation: n [S * <*] a is to be interpreted as the propositional ex- 
pression^ "Person S knows that formula <=< is true". The remainder 
is the usual '"structure of the Propositional Calculus.) 



III. SEMANTICS: 

A. Motivation for structure of models 

In the Propositional Calculus, a model consists of any map- 
ping ir of all propositional variables into the set {o,lj . Once such 
an assignment is made, the truth-values of all formulas are uniquely 
determined by a straight-forward truth-table analysis. Our problem 
here is more difficult since we interpret [S*^] as, "person S knows 
that formula ©< is true". Thus even after propositional variables 
have been assigned values certain additional arbitrary decisions 
must be made to allow different people to "know" different "facts" 
(or, equivalently, the same person to know different facts in dif- 
ferent models). However, the values of many formulas of the form 
[S**-<] are uniquely determined if they are to be consistent ftith the 
three basic properties of the calculus (as listed informally in the 
Introduction). The third property, in particular, indicates that 
what one knows may be determined by other things he knows, and there- 
fore the assignment to [S*«"<] depends on all assignments previously 
made to formulas of the form [S*£]. 

B. Construction of satisfying models 

We shall now describe how to construct a satisfying model 
for an arbitrary formula F. We shall then point out how that model 
could be extended to simultaneously satisfy additional formulas, and 
thus to be a full model for the calculus. First some definitions: 

Def : A base element « df any formula which is either a propositional 
variable or a formula of the form [S*A]. 
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Def: A model = df an assignment ir which map3 base elements into the 
set ; 0,1- • This assignment must be made in a particular manner to 
be described below. 

Def: t = df that mapping of all formulas into {o,lj which is 
determined in a natural way by the assignment ir; 
I.e., for cy any base element, r ( <=v) » tt(^); 

for ^,£ any formulas, r* ([*rA0]) - Z 1 if T ^^ ~ V ) " ^ 

^ CO otherwise ; 

and similarly for the other Boolian connectives* 

Def: A formula A is a tautology = df in all possible models (i.e. for 
ail permissible assignments ir to the base elements which are subfor- 
mulas of A), 7^ (A) = 1. 

Def: 3 is said to be a consequence of A = df in all possible models, 
if r • (a) = i, then r (Bj~^~T. (We also say A implies B, or B is 
deducible from A). (it follows immediately that A implies B if and 
only if [A=j>5T is a tautology.) 

Def: B is said to be a consequence of a set of formulas & = df in all 
possible models, if ^ 7r (A 1 ) = 1 for every K.eCL, then ^( B ) - i* 

Def: A set of formulas U is logically closed = df for any formula 
A, if (2 impl^s A, then A e CL . 

Let K be a formula which, at any stage during the construction 
of our model, has the following property: For any formula A, S 
"knows" A (i.e., the assignment 7r([S*A]) » 1 is to be made), if and 
only if A is a consequence of K. Then, by adding conjuncts to K, we 
can increase the scope of S's knowledge while satisfying the property 
that the set of propositions which S knows is logically closed (since 
it is just the set of consequences of K). 

Note 1 : We must insure that K remains consistent in order to obtain 
an interesting model. 

Note 2 : Since any formula has only a finite number of subformulas, 
thus only a finite number of base elements and a finite number of 
models, we can effectively test whether a formula is a tautology by 
simply enumerating the possible models. A systematic proceddre for 
doing this will be described below. 

Let J? be the set of formulas {B.} which are true but which S 
must not know (i.e. for which r (B . ) « 1, but the assignment 
^([S^]) - has been made). T x 

Note 3 : We cannot permit the formula [K=$B.] to be a tautology, for 
any 3d c <£ , for if it were the model woula be inconsistent since 
[S^B^^j would have to be mapped into both and 1. 

First we assign to each formula a level. Formulas not involving 
any S* 2 s are ;■•:.:: signed level 0. A combination of formulas by proposi- 
tional connectives is assigned a level equal to the highest of the 
levels of its components, and a formula S*A is assigned a level one 
greater than that assigned to A. Now with K initially the null form- 
ula and *£ the empty set, we construct an assignment ir to base 
elements of our formula F as follows: First make assignments to all 
base ele^oi.'.j of the lev:;. ; ; ; level, then to those of the next higher 
level, e^r/ acoording W ^*io following restrictions: 
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1) Assign all prepositional variables (base elements of level zero) 
or 1 arbitrarily. 

2) y-.oGi-n formulas of the form ;S*a] (higher level base elements) 
as follows: 



a) If A is [S*3] or ~[S*B] for any formula B, set tt([S*A]) = 1 
and replace K by [KAAj. 

q) if [k=>a2 is a £aufcG2,or.y+ sei? tt([s*a]) = 1. 

d) If [[KAA]-->B, ] is a tautology for any B, esf , set 
tt([S*AJ) = and replace jf by c-fux. x 

d) If r(A) - 0, set tt([S*A]) =' 

e) Otherwise, assign 7r([S-A'i ) arbitrarily to or i. However, 
if tt([S*A]) - 1, replace K by [KAA and if ir([S*A]) = Q, replaced by 
XuA. 

Now to extend this model to cover additional formulas, simply 
order the base elements of the next formula according to level. Then, 
keeping the K and cZf which resulted from the assignments tl.^.3 far, 
assign all new propositional variables arbitrarily and proceed to 
assign other base elements as in 2) above. 

C. Semantic Decision Procedure 

We can test whether a formula is a tautology in the calculus 
by means of a truth-table format, by following rules a) thru e)' above 
and addigg one line for each possible model. The details of the pro- 
cedure are presented by means of an example (Table 1), explained 
below, in which it is established that 

[[[S*[pVq]] A [S*~p]] ^ [S*q]] 
is a tautology. The table is set up with one column for each base 
element (I, III, v) and Boolian connective (II, IV) at the top level 
of the formula being tested, and additional comumns for propositional 
variables (VI, VII), other relevant sub-expressions (VIII, IX), and 
the formula K and set X for each model. Columns VI thru IX, lines 
-l tnru 4, are immediately generated by making all possible assign- 
ments to propositional variables. Then column V was chosen to be 
filled in (I, III, or V could be filled in in any order). The 
assignment in lines 1 and 2 is determined by rule d). Lines 3 
and 4 are to be assigned arbitrarily, by rkle e). Thus they were 
assigned and "q placed under X, and also copies of lines 3 and 
t thu \ far with a "l 1 * in column V and "q" added to K, were added to 
tne table (lines 5 and 6), so hhat all possible models are repre- 
sented. (We shall speak of this as the "splitting" of models.) 

Now column III is assigned values. Lines 1,3, and 5 each split, 
generating lines 7, 8, 9. All previous assignments, including K and' 
^., are always carried along in the split and added to if necessary, 
in column I: Lines 1 and 7 are determined by d). Line 2 solits 
(generating 10). Lines 3 and 4 split, after we establish that 
UpVqJs^q] and LlpVq]=^~p] are not tautologies so that c) does not 
;-ply. Lines 5, 6, and 9 do not split, since [q=>[pvqj] and 
• • :A ^pJ=>LpVq] are tautologies (which can be established in similar 
smaller truth-cables), so the assignment is determined by b). In ' 
line 8, since [ I ~pA[pVq] J =^q] is a tautology, the assignment is 
determined by c). 

Now the remaining columns may be filled in in the usual way and 
since^olumn IV turns out to have all "l"s, the tautology is established, 
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iv. ?rg?;<;rtii<;s of thk formal system 

A. Reqw^ed properties 

The 'models described above all satisfy the conditions re- 
quired in the introduction to this paper, for the folluv/ing reasons: 

j-) "What anyone knows is true." By rule d), [S*A] cannot be 
mapped into i unless A is mapped into 1. 

i 2) "For any proposition one knows whether one knows it.' 1 
Rule a) precisely covers this case. 

3) "One knows any logical consequences of the other things sdsh& 
knows. ' This is satisfied since the set of things S knows is logical- 
ly closed (being the closure of a single formula K), in any one 
model. Formally, this condition is equivalent to establishing that 
the formula 

[[[[S*A] A [S*B]] A [[AAB]=*C]] => [S*C]] 

is a tautology. This could be done as in the example above in III C: 
or one could use precisely the statement which was proven a tautology 
in the example if one established that 

[[S*A] A [S*B]] <=> [3 * [AAB]] 

is a tautology, and that "Substitutivity of Equivalence" is a legi- 
timate derived rule of the system (both of which are probably very 
easy tasks)* 

B. Further Theorems 

Thm 1: The rules of deduction in this system are sound and (seman- 
tically) complete. 

Proof: Immediate from the usual definitions of soundness and 
completeness, since we have defined implication in terms of the 
satisfying models. 

Thm 2: If Ol implies B, then there is a finite subset J^Qd such 
that & implies B. * 

r pa6QF : Assume d is infinite, Aq, k ± , ... £&. Define >* n 
- l A 0* A l> ••• > A n I • Suppose the theorem is false. Then for every 
finite *£rc (2, it is not true that X3" implies B; 
i.e., there exists a model ir such that 

*%(&) = 1 and ^(B) = 0: 
i.e., there exists a model ir such that 

7^(^~B) = 1, for any finite ^ 
i.e., for every n, there exists a v such that 

r 7rU'n>~B) = 1. 
We shall now show that this implies that there exists a particular 
model X such that for every n, ^ ( ^ n > ~B) = 1: therefore 
^X^*" 3 ) = 1 > which contradicts the assumption that CL implies B. 

Let C ,C4i,C2, • . . be any enumeration of all base elements aivoear- 
ing in {^B,A 0j A 1 ,A 2 ,... } , listing first all base elements in ~B, 
then all those in A , etc., subject to the restriction that if C,- is 
a subexpression of Cj, then i^j. 1^hls requires prepositional vari- 
ables to appear before other base elements which contain them. ) 

Let Xp = (D if, for every n (no matter how large), there exists 
a model Xl n J such that K ( n )(~B, J) = 1 and -hi n )(C^) - 0. 

Let X Q = 1 otherwise^ ' n ° 

foofce 1 > If 7\(~B,J) = 1, then ^(~9 M ^ n ) » 1 for all m£n.) 
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Tho^oTore for every n, .there is a model A^ n ' such the 
^(n)(-^, > n ) " 1' ana x( n )(c o )«* . 

Now assume A Q , A^, • ♦., X. have already been defined. 

f if , for every n, there exists a model A v ; , 

( according to the rules a) through e), such that the 

I following conditions all hold: 



A i+i " ) 0) xCn)( G ) « x for 0*J ^i 



1 otherwise 



« x (n) (o^ +1 ) - J o. 



(Note 2: By hypothesis, there always exists at least one rr. del such 
that °^) holds. By the construction thus far, at least that; model 
also satisfies B). .Because of Note 1, for every n there exists at 
least one model xt n ; satisfying *<) and B) for which either #) is 
also satisfied, or for every n, xC^^C, *) - 1. This choice deter- 
mines * i+1 . ) 

Define X by X(C t ) = X, for all i. 
Then T A ( ~<B, *f n ) - I for ill n. 

Then r* x (^B, CL ) - 1, contradiction. 

qed 



V. THE WISE MEN PROBLEM 

As an example of the use of our decision procedure, a formal 
solution will now be presented to a classical problem in reasoning. 

Problem; Three wise men are told by their king that he has 
marked their foreheads with paint (white or black but not both), 
and that at least one of them has a white spot. The man are placed 
so that each can see the color painted on the foreheads of each of 
the others, but not the color of his own. The king asks the first 
and then the second wise man whether he knows the color of Mso\smn 
spot, and received negative answers. The third wise man sees white 
spots on the foreheads of the other two. Prove that he (the third 
wise man) now has enough information to know that his own spot must 
be white. 

Solution : Call the wise men w\, , W , W„ . Let ft, denote the 
proposition that W ± has a white spot. J ri 

We have not thus far discussed formulas involving more than one 
person- variable, but the extension is straightforward. In testing 
for tautologies, me must keep track of separate book-keeping func- 
tions K and ^f,..^r each person. 

The problem will be solved if we can show that a certain formal 
statement is a tautology; namely, a statement to be Interpreted, 
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ll Tl 



^ knows certain facts described in the hypothesis of the 
LMbiein, then \\\ knows that his own spot is white". 



*\o \ 



>te that if S-]_ knows that Sgjcknows A, then S± must also know 
*A (since [So*a] implies A.l Therefore it will be sufficient to hypo- 
thesize tha* W? knows just that V/ 2 has a white spot, plus that which 
V. T 2 knows; namely, that W2 doesn't realize that he has a white spot, 
but he knows whether Wo has a white spot, that W^ has a white spot, 
that W^ doesn't know that he (w^) has a white spot, that Wi knows 
whether V/ 2 and W 3 have white spots, and that W^ knows there is at 
least one wh'i£S? spot* 
Formally, we consider the following statement: 

Cw 3 *{p 2 Aa/[w 2 *p 2 ]a[[w 2 «p 3 ]v[w 2 »^p 3 ]]a 

[W 2 *^p 1 ^^[w 1 ^ 1 ]A[[w 1 *p 2 ]V[W 1 »^p 2 ]]A[[W 1 ^ 3 V[W 1 *-p 3 ]]A 

[w^Cp^p^]])]}] -=$> [w 3 «p 3 ]. 

(Brackets have been omitted where it is unambiguous to do so). To 
test whether this is a tautology by our decision procedure, we need 
not consider all models, but rather only all those which map the 
left side into 1, therefore only those which map each conjunct in 
the I ) into 1, therefore only those which also map each conjunct in 
the O into 1 (since for all other models the implication is auto- 
matically satisfied). The work is carried out in Table 2. 

By the above remarks and columns b and j, we need only consider 
models which map p^ and p 2 into 1. All other columns except a,h, and 
i, are also quickly determined by similar considerations. Since the 
expression in Table II b is a tautology, 11 must be zero and row 1 
is eliminated from consideration. Since the only model which maps 
{} into 1 also maps p- into 1, [{} =» p ] is a tautology, so that 
U r 3*P 3 J must be mapped- 5 into 1 in the only model in which the hypo- 
theses are satisfied. Therefore we have shown that the third wise man 
knows his spot is white. 
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VI. CONCLUSIONS 

The semantic decision procedure, involving the construction 
of all possible models, is extremely long and awkward. Perhaps some 
general rules for decreasing the work required can be found. At 
least in certain special cases, e.g. the wise men problem, much less 
than the full construction is really necessary. 



The precise formulation add solution to the wise men problem 
seemed unnecessarily difficult largely beaause it was "unnatural", 
i.e. not the way people usually attack the problem. I believe this 
was necessary because we are working with the bare skeleton of a 
formal system. If some derived rules of inference are added, such 
as reducto ad absurdum, the cut rule, subordinate proof derivations, 
etc., proofs will be possible in fewer, more "natural", steps. 

This calculus is a first attempt to formalize an entire branch 
of common language usage -- namely reasoning about reasoning. It 
may be of interest to try to axiomatize the formalism into a Hilbert 
system, and investigate completeness of the resulting system, and 
how well it matches the intended model under standard interpretation. 
However, it is probably worthwhile to first generalize the system by 
adding quantifiers (to permit statements like, "There is an x such 
that for all S, S knows p(x).") 

Relationships betweentthis system and various model logics shou 
should also be studied. 

Eventually a system such as the one described above may be use- 
ful in enabling a computer to carry out the solution of reasoning 
problems, such as for example in the "advise taker" project. 
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